config

type Argon2Config struct {
	MemoryKiB uint32 `toml:"memory_kib"`
	Time      uint32 `toml:"time"`
	Threads   uint8  `toml:"threads"`
}

type AuthConfig struct {
	RequireEmailVerification bool           `toml:"require_email_verification"`
	BaseURL                  string         `toml:"base_url"` // e.g. https://shithub.example
	SiteName                 string         `toml:"site_name"`
	EmailFrom                string         `toml:"email_from"`
	EmailBackend             string         `toml:"email_backend"` // stdout | smtp | postmark
	SMTP                     SMTPConfig     `toml:"smtp"`
	Postmark                 PostmarkConfig `toml:"postmark"`
	Argon2                   Argon2Config   `toml:"argon2"`
	TOTPKeyB64               string         `toml:"totp_key_b64"` // base64 32-byte AEAD key for at-rest TOTP secrets
}

type Config struct {
	Env            string               `toml:"env"` // "dev", "staging", "prod"
	Web            WebConfig            `toml:"web"`
	DB             DBConfig             `toml:"db"`
	Log            LogConfig            `toml:"log"`
	Metrics        MetricsConfig        `toml:"metrics"`
	Tracing        TracingConfig        `toml:"tracing"`
	ErrorReporting ErrorReportingConfig `toml:"error_reporting"`
	Session        SessionConfig        `toml:"session"`
	Storage        StorageConfig        `toml:"storage"`
	Auth           AuthConfig           `toml:"auth"`
	Notif          NotifConfig          `toml:"notif"`
}

type DBConfig struct {
	URL            string        `toml:"url"`
	MaxConns       int           `toml:"max_conns"`
	MinConns       int           `toml:"min_conns"`
	ConnectTimeout time.Duration `toml:"connect_timeout"`
}

type ErrorReportingConfig struct {
	DSN         string `toml:"dsn"`
	Environment string `toml:"environment"`
	Release     string `toml:"release"`
}

type LogConfig struct {
	Level  string `toml:"level"`  // debug | info | warn | error
	Format string `toml:"format"` // text (dev) | json (prod)
}

type MetricsConfig struct {
	Enabled       bool   `toml:"enabled"`
	BasicAuthUser string `toml:"basic_auth_user"`
	BasicAuthPass string `toml:"basic_auth_pass"`
}

type NotifConfig struct {
	UnsubscribeKeyB64 string `toml:"unsubscribe_key_b64"`
}

type PostmarkConfig struct {
	ServerToken string `toml:"server_token"`
}

type S3StorageConfig struct {
	Endpoint        string `toml:"endpoint"`          // host[:port], no scheme
	Region          string `toml:"region"`            // e.g. "us-east-1", "nyc3"
	AccessKeyID     string `toml:"access_key_id"`     //
	SecretAccessKey string `toml:"secret_access_key"` //
	Bucket          string `toml:"bucket"`            // e.g. "shithub-dev"
	UseSSL          bool   `toml:"use_ssl"`           // true for Spaces, false for local MinIO
	ForcePathStyle  bool   `toml:"force_path_style"`  // true for MinIO, false for Spaces
}

type SMTPConfig struct {
	Addr     string `toml:"addr"` // host:port
	Username string `toml:"username"`
	Password string `toml:"password"`
}

type SessionConfig struct {
	KeyB64 string        `toml:"key_b64"`
	MaxAge time.Duration `toml:"max_age"`
	Secure bool          `toml:"secure"`
}

type StorageConfig struct {
	ReposRoot string          `toml:"repos_root"` // filesystem root for bare repos
	S3        S3StorageConfig `toml:"s3"`
}

type TracingConfig struct {
	Enabled     bool    `toml:"enabled"`
	Endpoint    string  `toml:"endpoint"` // OTLP HTTP endpoint
	SampleRate  float64 `toml:"sample_rate"`
	ServiceName string  `toml:"service_name"`
}

type WebConfig struct {
	Addr            string        `toml:"addr"`
	ReadTimeout     time.Duration `toml:"read_timeout"`
	WriteTimeout    time.Duration `toml:"write_timeout"`
	ShutdownTimeout time.Duration `toml:"shutdown_timeout"`
}